According to the Brandenburg Consumer Advice Centre, this new WhatsApp scam often starts with seemingly authentic documents, some of which are sent by mail. These letters feature the logo of a Swiss law firm, formal language, and an official tone. They claim the recipient has been a victim of a cryptocurrency or sweepstakes scam and is now entitled to large sums of money as compensation. The only catch is that identity verification must occur before the payout, and for this, a photo of their ID card is required—sent directly via WhatsApp.
A Photo is a Free Pass for Criminals
It sounds harmless, but it’s extremely dangerous. With just a single image of an ID document, scammers can open bank accounts, sign contracts, or make online purchases. Victims usually only find out when they receive demands for payment or warning letters. For the criminals, it’s a risk-free operation, but for the victims, it’s a nightmare that can last months or years.
The method isn’t new; only the disguise has changed. Perpetrators have long attempted to obtain sensitive data through fake job offers or supposed crypto platforms. Video chats have also been used to steal ID information. The law firm facade is just the latest mask, demonstrating how flexible cyber fraudsters are in their quest for trust.
Identity Theft as an Underestimated Threat
While many think of empty bank accounts when they hear the word “fraud,” identity theft goes much further. Perpetrators not only trade under false names but also destroy the victim’s reputation and creditworthiness. Someone who suddenly appears in credit databases as an alleged debtor not only receives letters from collection agencies but also has trouble securing genuine loans or rental agreements.
How to Protect Yourself
The most important rule: Never send photos of ID documents or sensitive documents unsecured via WhatsApp, email, or phone, no matter how legitimate the request seems. When in doubt, contact the official institution directly to verify. Two-factor authentication and strong, unique passwords also make misuse more difficult.
Anyone who has already disclosed data should immediately file a police report and contact a consumer advice center. They offer individualized guidance, including what to do if contracts have already been signed in your name.
